How to configure private registry credential in containerd.toml

[dawidmalina]

Can you help me how to properly configure private registry credential inside containerd.toml?

[Random-Liu]

If you are using containerd with Kubernetes, can you use ImagePullSecrets? https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/

[dawidmalina]

Ok but is this the only way. Can we configure this on host level?

[Random-Liu]

Currently, there is no host level config for this.

What is your use case for host level credential config? If you want a default, we'd prefer you do it at the Kubernetes level. See how to configure all pods in a specific namespace to use a default ImagePullSecrets.

[dawidmalina]

It would be nice to have drop in replacement for existing setup based on docker-ce where i don't use ImagePullSecrets as all configuration is done by configuration management tools. So i would like to have unchanged manifests and be able to switch from docker-ce to containerd.

[Random-Liu]

@dawidmalina Hm, make sense. Let me look into this. We should be able to add a config for this.

I'll try to make it in containerd 1.2

[Random-Liu]

@dawidmalina Does this meet your requirement? #838

Something like:

[plugins.cri.registry.auths]
  [plugins.cri.registry.auths."https://gcr.io"]
    username = ""
    password = ""
    auth = ""
    identitytoken = ""

[dawidmalina]

Yes. Thank you.